Change password: no error if new passwords don’t match

When a user changes their password on the profile: edit page, they need to type it in twice, and the two new passwords must match, before the new password is accepted. That’s fine – what I would expect.

What I didn’t expect is that IF the user types only one password in, or the two passwords don’t match, they are returned to the profile page with no error message. I would have thought it would give a “new passwords don’t match” error. As it stands, it actually looks like the passwords were changed successfully, but the passwords were not changed in db.